Carbon Black Cloud: After Importing IT_tool into reputation UI page, the "path" is missing Windows colon and backslashes.

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

The IT_TOOL path to the .exe tool is corruped like so (missing backsplashes and other characters):

Approved IT_TOOL C:rogram Filesicroft Officeootffice16XCEL.EXE Imported from POC Fileupload

 

Environment

Carbon Black Cloud Console:  Release-0.70.3 and earlier
Carbon Black Sensors: All versions

Cause

The input .csv record for IT_TOOL needs to be in double quotes and backslashes need to be "escaped"

Resolution

Format the csv file input path with a.) double quotes around the path and b.) backslash-escape the backslashes in the path as so:

WHITE_LIST,IT_TOOL,"C:\\Program Files\\Microsoft Office\\Root\\Office\\SAMPLE.EXE",Imported from POC,TRUE